Microsoft disrupts EvilTokens, AI scam platform that hijacked 12,000 accounts
Ars Technica AI · rss · 2026-09-23
Microsoft said it led an industry-wide disruption of EvilTokens, a subscription-based scam platform that compromised 12,000 Microsoft accounts in a few months. Launched via Telegram in February at $1,500 upfront plus $500/month, its core was an AI chatbot that analyzed victims' inboxes, identified trusted relationships and payment authorizations, prioritized high-payout targets, recommended fraud strategies, and drafted impersonation emails — compressing attacks from days to minutes.
More from Safety
- Spinning up containers for 20-line agent tools is backwards: Safescript compiles provable, 50ms-deploy apps — uriwa · 2026-11-12
- Zvi dissects Anthropic's latest system card, disputing the autonomy threshold call — Don't Worry About the Vase (Zvi) · 2026-11-12
- AI Analysis of 42 Jensen Huang Podcasts Tracks Shift on China and Chip Controls — ShakeelHashim · 2026-11-12
- Small AI sites under 20 MW mostly skip the permitting fights battering big data centers — antavedissian · 2026-11-12
- Newsweek op-ed: US should fund hospitals and universities in federated AI learning — Saul_Loveman · 2026-11-12
- Ron Bodkin: automated research taste advances faster than expected, but the evidence is weak — ronbodkin · 2026-11-11